CVE-2014-0128
squid: denial of service when using SSL-Bump
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.
Squid 3.1 anterior a 3.3.12 y 3.4 anterior a 3.4.4, cuando SSL-Bump está habilitado, permite a atacantes remotos causar una denegación de servicio (fallo de aserción) a través de una solicitud de rango manipulada, relacionado con gestión de estado.
Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled. Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service. Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer. Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets. Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-12-03 CVE Reserved
- 2014-04-14 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html | X_refsource_confirm |
|
| http://www.securityfocus.com/bid/66112 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1 Search vendor "Squid-cache" for product "Squid" and version "3.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.4 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.5 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.6 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.7 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.8 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.9 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.10 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.11 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.12 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.13 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.14 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.15 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.16 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.17 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.18 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.2 Search vendor "Squid-cache" for product "Squid" and version "3.1.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.3 Search vendor "Squid-cache" for product "Squid" and version "3.1.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.4 Search vendor "Squid-cache" for product "Squid" and version "3.1.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5 Search vendor "Squid-cache" for product "Squid" and version "3.1.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.5.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.6 Search vendor "Squid-cache" for product "Squid" and version "3.1.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.7 Search vendor "Squid-cache" for product "Squid" and version "3.1.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.8 Search vendor "Squid-cache" for product "Squid" and version "3.1.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.9 Search vendor "Squid-cache" for product "Squid" and version "3.1.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.10 Search vendor "Squid-cache" for product "Squid" and version "3.1.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.11 Search vendor "Squid-cache" for product "Squid" and version "3.1.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.12 Search vendor "Squid-cache" for product "Squid" and version "3.1.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.13 Search vendor "Squid-cache" for product "Squid" and version "3.1.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.14 Search vendor "Squid-cache" for product "Squid" and version "3.1.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.15 Search vendor "Squid-cache" for product "Squid" and version "3.1.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.4 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.5 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.6 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.7 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.8 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.9 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.10 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.11 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.12 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.13 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.14 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.15 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.16 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.17 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.18 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.19 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.19" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.1 Search vendor "Squid-cache" for product "Squid" and version "3.2.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.2 Search vendor "Squid-cache" for product "Squid" and version "3.2.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.3 Search vendor "Squid-cache" for product "Squid" and version "3.2.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.4 Search vendor "Squid-cache" for product "Squid" and version "3.2.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.5 Search vendor "Squid-cache" for product "Squid" and version "3.2.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.6 Search vendor "Squid-cache" for product "Squid" and version "3.2.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.7 Search vendor "Squid-cache" for product "Squid" and version "3.2.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.8 Search vendor "Squid-cache" for product "Squid" and version "3.2.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.9 Search vendor "Squid-cache" for product "Squid" and version "3.2.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.10 Search vendor "Squid-cache" for product "Squid" and version "3.2.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.11 Search vendor "Squid-cache" for product "Squid" and version "3.2.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.12 Search vendor "Squid-cache" for product "Squid" and version "3.2.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0 Search vendor "Squid-cache" for product "Squid" and version "3.3.0" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.3.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.3.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.1 Search vendor "Squid-cache" for product "Squid" and version "3.3.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.2 Search vendor "Squid-cache" for product "Squid" and version "3.3.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.3 Search vendor "Squid-cache" for product "Squid" and version "3.3.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.4 Search vendor "Squid-cache" for product "Squid" and version "3.3.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.5 Search vendor "Squid-cache" for product "Squid" and version "3.3.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.6 Search vendor "Squid-cache" for product "Squid" and version "3.3.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.7 Search vendor "Squid-cache" for product "Squid" and version "3.3.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.8 Search vendor "Squid-cache" for product "Squid" and version "3.3.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.9 Search vendor "Squid-cache" for product "Squid" and version "3.3.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.10 Search vendor "Squid-cache" for product "Squid" and version "3.3.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.11 Search vendor "Squid-cache" for product "Squid" and version "3.3.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.1 Search vendor "Squid-cache" for product "Squid" and version "3.4.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.2 Search vendor "Squid-cache" for product "Squid" and version "3.4.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.3 Search vendor "Squid-cache" for product "Squid" and version "3.4.3" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 11.4 Search vendor "Opensuse" for product "Opensuse" and version "11.4" | - |
Affected
| ||||||